dependable FhG FIRST Real Time Dependable Operating System BOSS Sergio Montenegro

Größe: px

Ab Seite anzeigen:

Download "dependable FhG FIRST Real Time Dependable Operating System BOSS Sergio Montenegro"

Claudia Bäcker
vor 6 Jahren
Abrufe

1 dependable FhG FIRST Sergio Montenegro sergio@first.fhg.de Real Time Dependable Operating System BOSS

2 Dependability made by FhG FIRST (Construction) Automation Space Trafic Medicine FT-RT Demonstrator

3 Dependability made by FhG FIRST (Construction) KENO, Lotto BIRD BOSS

4 Dependability made by FhG FIRST (Verification) Train Switches Mobile CommuniCation Cars KENO, Lotto

5 BIRD DLR

6 BIRD Sydney BIRD-Image, MIR, Feuer berechnet und markiert DLR

7 BIRD Bild-Bearbeitung 1. NIR-Kanal 2. TIR- Kanal 3. MIR- Kanal 4. Temperaturen der Feuerfronten Effektive Temperatur K Gestrahlte Energie kw/m DLR

8 BIRD Oster-Feuer, Österreich MIR Gestrahlte Energie DLR

9 BIRD Feuererkennung onboard sergio_home_old.tar.gz DLR

10 BIRD DLR

11 An Example: Control of the Satellite BIRD

12 BOSS...

13 BOSS... Real time embedded operating system Design for dependability Design for formal verification Support for fault tolerance Fast, small,... and... Open Source! Dependability made by FIRST

14 BOSS... designed for dependability Irreducible complexity Framework technology to reduce complexity component technology to handle complexity -> + Formal verification Dependability made by FIRST

15 BOSS... designed for dependability Irreducible complexity basic functions (for everything): lists Operations: Insert in list remove from list -> So easy, so safe Dependability made by FIRST

16 BOSS... designed for dependability Irreducible complexity Complexity destroys safety Required mental capacity Safety limit Forbidden area To complex to be safe Human mental capacity Design and implementation errors have their roots in the high complexity Complexity Complexity of the underlying system

17 Complexity destroys safety Dependability Safety limit Forbidden area To complex to be safe Complexity of the underlying system Complexity

18 Simplicity vs. Complexity

19 Simple control? 1. Elektronischer Drucksensor -> Elektronik -> elektrischen Ventil 2. Drucksensor -> Protokoll -> Input Driver -> Interrupt erzeugt -> das laufende Programm wird unterbrochen -> Betriebssystem rettet den Zustand -> aktiviert den Interrupthandler -> Interrupthandler aktiviert das passende Programm -> Programm wird initialisiert -> es ruft den Gerätetreibe zum Lessen... -> Berechnen -> Öffnen-Befehl zum Driver -> Protokoll -> Ventil -> Elektronik... -> irgendwann später wird das unterbrochene Programm wieder aktivieren. Total: Hunderttausend Lines of code (OS. Treiber u.a.), mehr als tausend Prozessorbefehle ausgeführt, mehr als eine Million Transistoren.

20 BOSS... designed for dependability Irreducible complexity Framework technology to reduce complexity component technology to handle complexity -> + Formal verification Dependability made by FIRST

21 BOSS Framework external Thread xx; class TestThread: public Thread { void run () { while(1) { {... do something } yield(); {... do something } suspend(); {... do something } suspendfor(1000); resume(xx); } } }; /** Another example: **/ Semaphore monitor; class OtherTestThread : public Thread { void run () { // active object OS Framework: modern software technology / engineering } Design for real time safety critical } applications cost effective }; /** Create 6 threads or applications ***/ TimeControl timecontrol; //To implement time loops timecontrol.startat(5000); // Time point for the first time timecontrol.every(100); // Cyclus time while(1) { timecontrol.wait(); monitor.enter(); // protected area, {... do something } monitor.leave();

22 BOSS... designed for dependability Irreducible complexity Framework technology to reduce complexity component technology to handle complexity -> + Formal verification Dependability made by FIRST

23 Complexity mastering by using Components Build the System by plugging applications as components Communication by using Software buses and routers Dependability made by FIRST

24 Java VM on BOSS Fast and safe upload of User (not RT) Applications Execution of user procedures Execution of macro commands Interpreter to experiment Mature and cost effectiv interpreter secure safe easy to use standard powerful

25 BOSS... Real time embedded operating system Design for dependability Design for formal verification Support for fault tolerance Fast, small,... and... Open Source! Dependability made by FIRST

26 Code Generation: C++ BOSS Petri-Nets Verilog SMV SMV Modell Checker Theorems Isabelle Checker

27 BOSS... is it correct? Hand Code Hand Code Operational Specification... How to do... BOSS + Applic. C++ HOL semantics of C++ Asserts HOL Time Constraints Temp. Logic Axiomatic Specification: What to do What not to do Gcc Front-End Gcc Front-End Code Generator HOL Generator Machine Code HOL Operat. Spec. Execution/ Test Compiler Checker Isabelle Checker Timing Checker Valid: Yes/No Consistent: Yes/No Satisfied: Yes/No Logfile with Time Universität Karlsruhe

28 BOSS... Real time embedded operating system Design for dependability Design for formal verification Support for fault tolerance Fast, small,... and... Open Source! Dependability made by FIRST

29 Complexity destroys safety Dependability Dependability P = Ausfall Warhscheinlickeit + Redundanz: Ausfall von irgendwas: p + p + p Ausfall mit Konsequenzten: p*p*p??? Fault Tolerance!= Deppendability... Fault Tolerance! -> Depnedability Redundancy management Redundancy Complexity

30 Middleware (1): What you program

31 Middleware (2): What you can get Distributed applications Dynamic reconfiguration Redundancy management

32 Middleware (3): What you can get Fault tolerance support multiple voters monitors TMR and beyond Distributed FT

33 BOSS + Hardware Fault tolerance support multiple voters monitors TMR and beyond Distributed FT

Ähnliche Dokumente

Introduction to Python. Introduction. First Steps in Python. pseudo random numbers. May 2016

Introduction to Python. Introduction. First Steps in Python. pseudo random numbers. May 2016 to to May 2016 to What is Programming? All computers are stupid. All computers are deterministic. You have to tell the computer what to do. You can tell the computer in any (programming) language) you